]> git.ipfire.org Git - thirdparty/strongswan.git/commitdiff
Added test config 5.5.1
authorMartin Willi <martin@revosec.ch>
Tue, 23 Nov 2010 10:40:18 +0000 (11:40 +0100)
committerMartin Willi <martin@revosec.ch>
Thu, 10 Mar 2011 09:19:32 +0000 (10:19 +0100)
src/conftest/suiteb/5.1.1/dut.conf [new file with mode: 0644]
src/conftest/suiteb/5.1.1/test.conf [new file with mode: 0644]

diff --git a/src/conftest/suiteb/5.1.1/dut.conf b/src/conftest/suiteb/5.1.1/dut.conf
new file mode 100644 (file)
index 0000000..e69de29
diff --git a/src/conftest/suiteb/5.1.1/test.conf b/src/conftest/suiteb/5.1.1/test.conf
new file mode 100644 (file)
index 0000000..653055f
--- /dev/null
@@ -0,0 +1,29 @@
+
+# This config fakes NAT and uses a custom source port. This does not work
+# to port 500, 4500 is used instead. If this test uses a real NAPT box in front,
+# a simple initiate using child-default would be sufficient.
+
+preload = socket-dynamic
+
+actions {
+       initiate {
+               config = child-nat
+       }
+}
+
+configs {
+       ike-nat {
+               fake_nat = yes
+               proposal = aes128-sha1-modp1024
+               lhost = 172.16.1.20
+               lport = 1234
+               rhost = 172.16.1.10
+               rport = 4500
+               lid = ls.strongswan.org
+               rid = dut.strongswan.org
+               child-nat {
+                       lts = 10.20.20.0/24
+                       rts = 10.10.10.0/24
+               }
+       }
+}